Known exploited vulnerabilities
Under attack, per CISA.
- oracle peoplesoft enterprise peopletools Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:... 9.8 Critical
- ivanti sentry, standalone sentry +1 more An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1... 10.0 Critical
- google chrome, chromium v8 +1 more Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote... 8.8 High
- arista eos, extensible operating system +1 more Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass 6.9 Medium
- cisco catalyst sd-wan manager, catalyst sd-wan controller, sd-wan vsmart controller +2 more Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability 7.8 High
- check point security gateway, checkpoint gaia embedded, gaia os +2 more +4 more User Authentication Bypass in VPN Remote Access and Mobile Access 9.3 Critical
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +5 more +7 more LiteLLM: Authenticated command execution via MCP stdio test endpoints 8.7 High
- solarwinds serv-u SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability 7.5 High
- mirasvit full page cache warmer for magento 2, full page cache warmer +1 more Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection 9.3 Critical
- android framework, google android +1 more In multiple locations, there is a possible way to achieve code execution due to an integer... 8.4 High
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 more Important: kernel security, bug fix, and enhancement update 7.8 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... 7.5 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 more PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities 7.8 High
- nx console, nrwl nx-console +1 more Compromised Nx Console version 18.95.0 9.3 Critical
- avb disc soft daemon tools lite, daemon tools lite, disc-soft daemon tools +2 more A supply chain attack compromised the official installation packages of DAEMON Tools Lite ... 9.3 Critical
- tanstack, @tanstack arktype-adapter, eslint-plugin-router +211 more +213 more Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys 9.6 Critical
- litespeed cpanel plugin, litespeed technologies whm plugin, litespeedtech litespeed cpanel plugin +1 more +3 more LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as... 10.0 Critical
- drupal core, drupal +1 more Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 9.8 Critical
- trend micro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 more A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre... 6.7 Medium
- langflow Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE 9.4 Critical
- microsoft defender, malware protection engine +1 more Microsoft Defender Elevation of Privilege Vulnerability 7.8 High
- microsoft defender, defender antimalware platform +1 more Microsoft Defender Denial of Service Vulnerability 4.0 Medium
- microsoft internet explorer Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft... 9.3 High
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000... 8.8 High
- adobe acrobat, acrobat and reader, acrobat reader +2 more Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9... 9.3 High
- microsoft directx, windows 2000, windows server 2003 +2 more +4 more Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in... 9.3 High
- microsoft windows, windows 2000, windows server 2003 +3 more +5 more The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista... 10.0 High
- microsoft exchange server, microsoft, microsoft exchange server subscription edition +4 more +6 more Microsoft Exchange Server Spoofing Vulnerability 8.1 High
- cisco catalyst sd-wan, catalyst sd-wan manager, catalyst sd-wan controller +2 more +4 more Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 10.0 Critical
- berriai litellm, red hat lightspeed core, ansible automation platform 2 +1 more +3 more LiteLLM: SQL injection in Proxy API key verification 9.3 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1... 7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 more PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal 9.3 Critical
- amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place 7.8 High
- cpanel, cpanel whm, wp squared +1 more +3 more WebPros cPanel and WHM Authentication Bypass via Login Flow 9.3 Critical
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +26 more +28 more Windows Shell Spoofing Vulnerability 4.3 Medium
- connectwise screenconnect Improper limitation of a pathname to a restricted directory (“path traversal”) 8.4 High
- d-link dir-823x, dlink dir-823x firmware +1 more A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized... 7.2 High
- simple-help simplehelp SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files... 7.2 High
- simple-help simplehelp SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low... 9.9 Critical
- samsung magicinfo 9 server Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9... 8.8 High
- coreweave marimo marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass 9.3 Critical
- microsoft defender, defender antimalware platform +1 more Microsoft Defender Elevation of Privilege Vulnerability 7.8 High
- cisco catalyst sd-wan manager, catalyst sd-wan manger +1 more Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability 5.4 Medium
- cisco catalyst sd-wan manager Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability 7.5 High
- cisco catalyst sd-wan manager A vulnerability in Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker... 6.5 Medium
- quest kace systems management appliance (sma), kace systems management appliance +1 more Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2... 10.0 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross... 6.1 Medium
- kentico xperience Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE 7.2 High
- jetbrains teamcity In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions ... 7.3 High
- papercut ng, ng/mf, mf +2 more This vulnerability allows remote attackers to bypass authentication on affected installations of... 8.2 High
- Show olderLoading…